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COMPUTER SUBCOMMITTEE 22 JAN 4979 
TO: Computer Security Subcomnittee Members 
FROM: Subcommittee Chairman, Computer Security 


SUBJECT: Charter Amendment. 


1. I propose that we add to the Charter (DCID 1/11, 
Attachment 2) the responsibility of providing Computer Security 
in the Telecommunications field. 


2. I propose to change the first paragraph of the 
Charter to read as follows: 


"Review, formulate and recommend to the Director 
of Central Intelligence policies, standards and procedures to 
protect intellisence data stored, processed, or communicated by 
computer," 


3. I ask you to express your views on this matter at 
the 24 January 1979 meeting. I also request you coordinate this 
proposed Charter Amendment within your agency and provide to me 
a written agency position no later than 22 February 1979. 


Incl: a/s 
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| Bemerae CID No. 1/11 


Attachment & 


‘DIRECTOR OF CENTRAL INTELLIGENCE DIRECTIVE NO. 1/11 
(Attachment 2) 


ae ~* COMPUTER SECURITY 


. The Security Committee with respect to computer security shall: 


1. Review, formulate and recommend to the Director of Central Intelligence 
pelicies, standards and procedures to protect intelligence data stored or processed by 
computer. 


_ & Advise and assist the Director of Central Intelligence, Intelligence Community 
organizations, DCI committees and other intelligence users with respect to all 
computer security issues; and to resolve conflicts that may arise in connection 
therewith. 


3. Formulate and recommend to the Director of Central Intelligence resouree 

programming objectives fer Intelligence Community organizations in the field of i 

co:nputer security in consideration of current and foreseen vulnerabilities and threats 

and with regard for the effective and efficient use of resources; to foster and to monitor 

‘ an aggressive program of computer security ‘research and development in the 

; - Intelligence Community in order to avoid unwarranted duplication and to assure the 

pursuit of an effective effort at tesolving technical problems associated with the 
protection of computer operations. : 


- 


i nap haievige ep ioe ente'e i s 


4. Coordinate all aspects of Intelligence Community efforts in defense against 
hostile penetration of Community computer systems and as feasible to support other 
governmental efforts aimed at improving computer security technology; to foster a 
coordinated program of Intelligence Community computer security training and f 
indoctrination. 


_ 5. Facilitate within the Intelligence Community the exchange of information 
relating to computer security threats, vulnerabilities and countermeasures by 
providing a focal point for: : 


a. The evaluation of foreign intentions and capabilities to exploit Community 
computer operations; 


b. Central notification of hostile exploitation attempts; 


ec. The preparation of damage assessments of incidents of foreign exploitation 
of intelligence computer operations; and 


d. The development of ‘policy recommendations to the Director of Central 
Intelligence on the release of computer security information to foreign 
governments and international organizations. 


6. Review, formulate and recommend minimem computer security standards. 
procedures and criteria as guidance for system design, evaluation and certification of 
acceptable levels of security for computer systems. 

wt 
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